General
- Target 2026-07-19_9e370bc41af7d1ba67ff0d6aeaea4760_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- Sample260720-a84xjsaw8m
- SHA256 63b0796070f6389eb11205dd23f5148dc3d63e03b473909a137315bc8114a3b5
- MD5 9e370bc41af7d1ba67ff0d6aeaea4760
- SHA1 be840feb72f142799f90ea3ad3eb4fe585bd0000
- SHA512 06938589fcfb174071c5bcafa9272fa5048ef58c66203b46e61d01084e7746447fa07e345a23149eef6a81bd54a607b95bdd51de5972378db46d1801888757d8
- SSDEEP 49152:SYp95kv1J6d4pRCvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivW+LCvkcD+v49pN/3
- TLSH T1D4D522E991E15219BC42211A3AD6FAE008F5E7563BBE38E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_9e370bc41af7d1ba67ff0d6aeaea4760_amadey_elex_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_9e370bc41af7d1ba67ff0d6aeaea4760_amadey_elex_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_9e370bc41af7d1ba67ff0d6aeaea4760_amadey_elex_smoke-loader_stealc
- Size 2.6MB
- SHA256 63b0796070f6389eb11205dd23f5148dc3d63e03b473909a137315bc8114a3b5
- MD5 9e370bc41af7d1ba67ff0d6aeaea4760
- SHA1 be840feb72f142799f90ea3ad3eb4fe585bd0000
- SHA512 06938589fcfb174071c5bcafa9272fa5048ef58c66203b46e61d01084e7746447fa07e345a23149eef6a81bd54a607b95bdd51de5972378db46d1801888757d8
- SSDEEP 49152:SYp95kv1J6d4pRCvhCcD0Tgy0LXu1qoTzmYvr6/T7:Rp9ivW+LCvkcD+v49pN/3
- TLSH T1D4D522E991E15219BC42211A3AD6FAE008F5E7563BBE38E3DFC32594953B09BDE1C305
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1